fix  property
refactor security method
move javascript config