fix security issues