upgraded user security via meteor 0.8.2