Fixed file upload sanitize and hiding of super-admin
Avoid users access the WP backend