refactored security project through step 4