fixed undefined security question variable