remove security-server dependency