#76: fixed security test