added the web server security group to the database security group, so the web servers have access