add security stuff