syntax error fixed in security.yml