small security fix