How is security deposit refund handled legally?