Merge pull request #217 from sergeyklay/user

User
Fixed user widget broken action
Fixed critical permission check in ACL
Cleanup user controller, added some variables
Moved PHP code from View to Controller