change the change password authorization to route to the USER controller (instead of the Account controller)
Added SessionSecurity method for retrieving the current user's role
Added a Sensor authorization method