fixed security hole allowing xss
removed debugging code