some more  security stuff working