added authorization security when an admin user doens't have an account or any user has a temporary password