add rspec + security fix + model tweek