avoid whitespace in webtop header
remove output="true" on security functions