permit a index without sessions
Merge branch 'hotfix/access-control'
create a security module
Merge branch 'feature/actions-with-session'