fixes #158 make sure security_groups is an array