haven is a web app, main contains security control