adding in the security constraints so that individual API calls may be secured.