Added access control to most controllers, improved list and user groups views