add UserBundle and security