use unserialize to get source objects from database field (deserialize
does not allow objects anymore)