Reverted security.yml back as it broke /register page