committing changes from chapter 08. some differences in UserController
and some tests do not pass, probably becauswe of lameSecurityFilter and
usage of the platform-core  plugin (nav)