fix another security hole
fix multiclient support
debug logs