fix security setting