web/security: fix formating discrepancies