add security.xml
add security.xml to gitignore
refactor