DOCS-2285 update references/security page per new user/roles methods

Ready for merge. NOTE: The db.addUser() method has been removed from the ref table in a different pull request.