set up the application security