/denied page security fix