first setup for security example