- fix security configuration
- clean up html