Update security.md

Fixed typo : 
" minimum of 60 characters" instead of " minumum of 60 characters"