tweaks to front-end security