step_9 securing the app