security phrase bug fixes