added requireSecureAuthentication