fixed a fatal error when the security provider is created without any firewalls (which of course does not make sense but anyways, refs #473)