Change security code to string and add validation and tests