security change to not return sensitive data in response
remove dependency from a private file