#14 fixing paths for loading base controllers
#14 introducing session controller
#14 filtering data (password)
#14 adding authentication flag