fixed security settings