added content lookup

security still completely missing