security fix

also typo fix lol