"Secure" fields and API test added