some security changes