Controller actions now uses data from parameters.
fixed permission system
PHP Sux