Updated security section of to-do