fix: enableable behavior [...]

1. fix typos and unify name between domains and controllers to be
'enableable' everywhere (sometimes 'enablable' was used)
2. apply permission check for 'enable' and 'disable' controller actions
upd: readme changelog