fix security configuration problem