request

validate token protection

secure browser protection