Typo in security.js