fix input value string escape
fix incorrect permissions check
pull all fields of the session user into the session variable except the password and salt
apply field permissions
fix inputImageInline
add destination redirect override