fixed setids/setuid bug