base security page, some ui