Refactoring ManageBadBehaviour... 

- fixed bugs
- moved redirects, session- and token-validation back to controller..
Signed-off-by:Thorsten Eurich <thorsten@eurich.de>