AppUserService tests
security settings
add security filter
session handler
server settings refactoring
dev mode user
dev mode user
unauthorized entry point test