added security test data
fixed url rewriting