359 security

PR for https://github.com/backdrop/backdrop-issues/issues/359