refactored framework with APPass class

new simple and complex controls along with security questions