spelling fixes
correct link to security_tips.html