Added ROLE_STAFF to security.yml