Add additional security on MemberDirectory controller

Only seclevel=2 allowed