hotfix: use $request to get secure status