fixed delete security bug