modified documentation cleared up some security logic