implemented all security services. admin stuff left still