start of user control and security