more security fixes