Secure admin handlers with forms based authentication