add security rules, add scroll to form