add security + add JS WIP
extract duplicated code
responsive