updated security and CNAME