fixed spelling
add info about required security role