add missing translations (including JS) and fix portlet security