bug in security filter fixed