ENHANCEMENT replaced custom sql queries with ORM calls, added test stubs (user-security-report)