bug fix in secure site option path