fixed security and warnings
added rule for ignoring *.json~