remove controler file inclusion. Leave this job to autoloader
introduce backend controller
fix system cache clear
xss form field
fix antispam check field
add xss check field by default to all forms
pass security token on every post
check user permission on post to backend
check user permission on post to backend
Merge branch '3.6' of github.com:impresspages/ImpressPages-CMS into theme_autoinstall

Conflicts:
	ip_cms/modules/administrator/repository/public/admin/ipRepositoryBuy.js
make xss field invisible
Merge branch '3.6' of github.com:impresspages/ImpressPages-CMS into theme_autoinstall
background field in theme config