add security content (roles)