added instructions about how enable RESTHeart security