update security of admin controller, update admin view