do we really need securityCheck call? It looks to be only for debugging. Maybe we can remove it after we ensure everything work. We can extend our test to ensure that person can login and open frontpage. This should be good enough.