security tests pass