minor security fix