security config change and curl script update