fix some security stuff