documentation headers
Big update on app/module/action access protection and MVC structure.

Got rid of useless Module class, merged with the controller.
Uses anonymous function to allow developer to configure action reach
within the app config file.
Renames ctrl attribute of App class to controller
clean up
Move documentation out of core/Citrus