Removed insecure package and changed permissions using Collectionname.allow()