fix security-type cancel-behaviour (set value only on log in)

fix security-type cancel-behaviour (set value only on log in) #420