changed unserialize to contao internal deserialize