moved fake routes for the security service provider to a connect() method (with auto-registration)