add security to list_customer.xml