worked on j_security check