fix failing test (unrelated to security stuff)