Added a proper "session panel", i. e. a place where the user profile and a logout link or a login link are displayed, depending on the user's authorization status.
(cherry picked from commit af1700b)
We actually *do* want mail delivery during development.
(cherry picked from commit 4e70d92)
Fixed a bug that lead to the menu filter incorrectly passing menu items in dev mode, because the base URL was included in the path used for comparison, while the firewall's access control does not use the base URL. This probably also fixes bugs which would have occurred in setups where the application is not stored in the web server's document root, or with a failing rewrite of the production front controller.
(cherry picked from commit 796a85d)
In dev mode, the developer toolbar somehow messed with the target URL used for redirecting after a successful login, so we disable security for it. There might be a better solution, but this is suitable for now.
(cherry picked from commit 7bbf1ff)