more security updtes regarding data returned