supporting batch requests and secure apps via data attributes