adding security blocks and routes to plugin