all finish comments and add security auth