Fix typos
diff --git a/webapps/docs/security-howto.xml b/webapps/docs/security-howto.xml
index b986dc7..197cbe9 100644
--- a/webapps/docs/security-howto.xml
+++ b/webapps/docs/security-howto.xml
@@ -466,10 +466,10 @@
       when the session is persisted during a restart or to a Store.</p>
 
       <p>When using the <strong>JDBCStore</strong>, the session store should be
-      secured (dedciated credentials, appropriate permissions) such that only
+      secured (dedicated credentials, appropriate permissions) such that only
       the <strong>JDBCStore</strong> is able to access the persisted session
-      data. In particular, the <strong>JDBCStore</strong> should be accessible
-      via any credentials available to a web application.</p>
+      data. In particular, the <strong>JDBCStore</strong> should not be
+      accessible via any credentials available to a web application.</p>
     </subsection>
 
     <subsection name="Cluster">