updated readme part of security.yml

In my project found out that example security.yml won't work for anonymous. This PR fixes configuration example.