[User] add flush message
[Util] fix comment
[PaymentType] implements display order
[IncomeType] implements display order
[Security] enable https