security bugs fixed