Update the security config to use correct authorization filter order.