Fixed autocomplete security weakness