fixes #600

refactor ckeditor menu links
partial fix #607

security checks for auth files
another #607