Updated reference to user
Refactoring secured urls

The main goal behind the refactoring was getting proper redirects to login
rather then 403 or 500 codes. This has now been achieved, as well as sane
logout strategy, and being able to register a token after being logged out
through logging in first and then being redirected to the proper URL

- Due to an issue in PHP 5.4.4 (Shipped by Debian Wheezy by default)
  there is an issue when destroying a session. This has been fixed in
  PHP 5.4.11, it is recommended to use dotdeb.org to get the latest
  stable version of PHP 5.4 for debian wheezy since there have been
  multiple security fixes in the meantime.
  Ref: PHP5=5.4.19-1~dotdeb.1
Removing obsolete code
Merge pull request #5 from SURFnet/feature/security-enhancements

Security Enhancements