#14 Various security fixes, added language option in user settings page