publishing security middleware fix, request builder