Update security.xml