fix security configuration