add some security access control
change the template of some url