changed plonOnServer flag and fixed security issues