security fix

fixed major security bug
Merge pull request #14 from ngardner/master

fixed major security bug