Add security, app is still unsecured