additions to security back end