security handling in application