adding sample with security header