security.map is not a function