Safer singleton get instance