added security to cms module