turn on security checking of requests