added security classes and tests
updated to add authorisation to getAll