security fix, read all button, notifications