add security content
update scenario 2