added security route, got getConfig working