enable automated security updates

addresses #39