add security test