Best Practice Updates

Updated all files to use require_once instead of require, as there were
some classes and pages requiring class files in addition to the standard
config. Also rolled out an update for the User class to use private
scoping correctly, and become truly OO.