initial step towards creating a security api