clean up security guide: his => their [ci skip]

Update the Ruby on Rails Security Guide to follow the [API Documentation Guidelines](https://github.com/rails/rails/blob/master/guides/source/api_documentation_guidelines.md) by changing 'his' to 'their'

Thanks