added security.py, not finished, still lazy to do it :p