small fix to security