updates to layouts, view, model, controller with security in place