improve security settings