secuirity fixes