add SecuritySettings and dependencies
fix oauth configuration