- add security policy to form prototype page