fixed security hole and made index.js work
upped version