security patch for oAuthPPO.cgi