secure application layout