security does not work