add basic security and allow changing resource name