extract form security helpers, replace these files