Update security allow css and scripts