Fixed security configuration for provider sign-in