Update security.md

Fixed typo : 
" minimum of 60 characters" in place of " minumum of 60 characters"