Fixing wrong docs in RBAC PHPManager and wrong paths in security-authorization.md

close #5348