secure request for aae widget