Fixed typo in unauthenticated handling spec in security.spec.js.