added security section (day 3)