added string extension, added security configs