fixed some security issues