Change packages structure
Security - login, check admin role for admin pages
Security - user list with remove link for admin
Security - reuse authorizer on facelets.