fixed security xml