security checks in menu and controllers
firstname, lastname added to user entity
user import