minor security fixes