update the configuration of security.yml