fix security flaw in mysql authentication