fixed security answer validation