detect and block testing accounts in admin activity log page unless "testdata=true" #2493

for #2493 
Make the test stronger. use `.endsWith(".tmt")`