correct typos
note security issues