*Propesed fix to security-role problem Addendum*

[Thom Park]

Apologies,

I neglected to name the source file for the  isUserInRole() method, it's

org.apache.tomcat.core.RequestImpl.java

regards,

Thom