done with security. Need to be able to take away access from a user. Still need to do final check