add security on admin reset