Update security.rst

Author: senenh

security.rst

@@ -990,7 +990,7 @@ To accomplish this you have 2 options:
 In both cases, you'll still deny access using methods similar to what was
 shown above.
 
-Retrieving the User Object
+3) Retrieving the User Object
 --------------------------
 
 After authentication, the ``User`` object of the current user can be accessed