fixed a minor security issue