fix security problems