feat: documentation on rbac middleware

Note: RBAC should be in caps everywhere. Exception is when it has a specific context (such as a configuration variable) that must be lower case.