Removed unauthorized attribute from session after its value is retrieved in Login controller. Now if a logged in user is registered, the user added to the session is a Registrant (UserDA). Fixed bug in invoice controller: verification is now done against the registrantId of the logged in user instead of against the userId.
Merge branch 'master' of https://github.com/patr7/conf-reg-sys