add security checking to resources page