security fix

fixed major security bug