added a security module

next up is to start phasing out usage of rootscope