added Html format (only very rough for now)
made controller calls with rest work (somehow)
fixed wrong usage of phpSec lib in User controller