remove one security issue from crumb - see hapi issue #1813