small security fixes