ties in the security setup screen
unhardcode path to sdcard use API call