fixed security configuration