config module
add permission configuration
Security Setting for some internal type
reorganize security code.
urlCtrl module
file uploader works