fixed security filter chain