fixed links for security configuration
added .html suffix