added security stuff for apache