update security tutorial with more accurate info