update xml security to include connect_to when calling metadata