fix security settings