fixed bug where sensitive info could be exposed