add security related tests