fix security typos