Whitelist all default actions for now
Encrypt passwords with AuthComponent