Refactor access control logic
Remove coreUsers class, make the users panel use a smarty template