security and security website doc updates for REST