add security for app
add test for security