fixing a bug in force message security