changed GET metadata security check
fix resource size