tidy up of location and security config in docs