security problems fixed and user config plugin integration