update security config for basic auth