initial pass at integrating security with client app