Move Message Publish to Admin page

restrict admin api call to admin users

upd Gemfile.lock
random pwd for user reset pwd
fx dom warning
added Device to user creation option type

update db/schema timestamp

misc:
secure params for group creation