1. Add session information into getTpl for each template
2. Update control permission for each page
3. Update default.html, only admin group can execute wizard