Update oauth-security.xml