add singleton class to work with session; add acl system to controllers;
Merge remote-tracking branch 'origin/master' into dev-mikhalchuk-sessions
add php doc