fixing attr_protected CVE-2013-0276
fix serialization vulnerability
bumping to 2.3.17