allowing secure unitials requests