check if plugins are enabled before exiting

Before this, if plugins were disabled then none of the ZM event
listeners
were enabled either.
add setters to ZMIdNamePair
add missing getter for review title
fix review controller class reference
add ^/account/create to security.yml