** Fixed a bug that prevented making purchases without logging in
** Removed Secure annotations from UserController (not really
controllers responsibility to do security checking)