fixed root api
added namespaces
added default security