Updated security in all controllers. CustomControllerFactory supports now areas. Added change profile option.