putting it together - added discovery and metadata paths to security listener