fix weird double link to www.pivotal.io/security in a note in pcf-security.html