basic xml based security is done