setting security config off