add "security team" role and authorization accordingly

plus fix "write error and info messages on every view"