add security config + fix empty xmlns issue