adding xml security