security rules working updated