Add a security handler so you can deny dependant on the userObject on the fly & read the methods, has example too. Also reorganises some of the packages.