fixed security issues, added basic photo gallery for user profile page, added admin attribute to users, created index page for users, set up friendly forwarding for signing in
Fixed some basic security issues, i.e users must be signed in for most
actions in nearly every controller. Other checks are done to ensure a user
cannot delete other users etc. It is now possible to create administrators
which can delete other users. A simple photo gallery and a side nav bar
has been added to the user's profile page. Friendly forwarding after
signing in has been implemented