some  security and auth fixes
added filter to collection converter 2