adding security config