add security route