disable web security for integration test