get security object from app instead of using Security class itself