fix #32, add authorization based on domain to access to application, replace all non secured actions by secured one, attempt to use custome unauthorized page but fail