minor security bug in instalation