setting up security