rapport, security and ajax fixed