enabled helmet security middleware