added websecurity setup