admin handler is now secure; reformatted