moved security settings back to app; added filter on duplicate security filters