Cleanups & expressions

* cleanup security parser and properly use parsing for Map attributes
* cleanup deprecated test API usage
* web subsystem expressions