Added /app/preferences page and updated security.yml to protect all pages beginning with /app. Unit tests completed. Added a todo in LogoutBundle.