Update security.md

Fixed the route name in the password reminder form.