some security fixes