extract the security context to be a seperate context file.
clean up some comments.
fix the lastname ex attr of google open id.