fixed security backing bean