fixes #423 - Document webSecurityEnabled