corrections to security config