Hi Amit,
Sounds like they might have corrupted something in the code. The continuous resets are most likely the core attempting to boot the code, then getting multiple faults leading to a core lockup reset. Just to double check...did they test their code with security disabled?
When they enabled security what exactly did they do? Did they modify the flash configuration field values, then reprogram the entire image? If they just tried to update the flash configuration field, then that might be their problem. The Unsecure state is a value of 0xFE, so one bit is programmed. If you try to change 0xFE to another value that is secured, then you are overprogramming the flash which can corrupt the value. So the correct thing to do is erase and reprogram the entire image (or at minimum the entire first sector where the flash configuration field lives).
Hope this helps,
Melissa