Add migration script and respond to pr feeback
Security for http backend