fix header in SecurityManager