add security checks to web