Extract security related methods to security component
Rename application component to state component / send state as a map of values (easier to extend with new state)
Send initial state as a result of calling into state component
Introduce state (controller/model/store/util) replacing Status/ApplicationContext
Add a state related dev panel
Manage header user buttons when header is rendered
Extract Ui session timeout management to own controller
Extract permissions to own controller
Remove moved code from User
Make User controller only available when browser supported & licensed