load csv + security model