fix date-picker: improve security by removing scope binding