updating SecurityConfig.java