unsecured
basic in-memory security
added logging