fixed SecurityListener (if/elseif)
added some url rewrites
added fwk/core to dependencies
added public/private visibility