added some security in api,  new version of rest, new buttons