security fix

• adds a new class designed to block a recent serialization security exploit. see http://java-is-the-new-c.blogspot.de/2015/11/clarification-and-fix-for-serialization.html