adding some security into the app