fix rest api
add public property
move security method