Minor fixes

src/viur/core/config.py

@@ -398,9 +398,9 @@ class Security(ConfigType):
     password_recovery_key_length: int = 42
     """Length of the Password recovery key"""
     closed_system: bool = False
-    """If `True` Activates a mode in which only logged-in users can access all routes"""
+    """If `True` it activates a mode in which only authenticated users can access all routes."""
 
-    closed_system_allowed_paths: t.Iterable[str] = (
+    closed_system_allowed_paths: t.Iterable[str] = [
         "",  # index site
         "json/skey",
         "json/user/auth_*",
@@ -409,8 +409,8 @@ class Security(ConfigType):
         "vi/skey",
         "vi/user/auth_*",
         "vi/user/getAuthMethods",
-    )
-    """List of Urls that are allowed  without a user in a closed system"""
+    ]
+    """List of URLs that are accessible without authentication in a closed system"""
     _mapping = {
         "contentSecurityPolicy": "content_security_policy",
         "referrerPolicy": "referrer_policy",