http security improved