Update security.yml

Refactoring security configuration
Note that you must reset your users passwords (the encoding strategy changed to pbkdf2)