add user manager and user/group forms
update security for new plugins