feat: documentation on rbac middleware