Move security related config to security.py