prompt injection fix