Security cookie is mostly done. The hash signing is not finished and some configuration options are missing. Therefore still not configured in the security configuration