init commit
added underscore. improved middleware to check user access to actions which require user to be logged in