- made login/logout functionality in User controller work
- added basic access rules for users
- fixed access problems in MySql->executeQuery() which needs to create models