Update entity-security.rst

Updated to match video, was getting an error 'undefined variable roles' prior to adding $this->roles.