Change table user_rights
Remove separate route to pictures along with pictures controller
Add basic authorization to currently available controller actions
Merge branch 'security'