bugfix in security backend