Important security fixes

Fixed the permission for various actions on different pages.
Improved the security for the change user info form on profile.php
Fixed critical security issue on playlist picker, which allowed
"hackers" to add songs to a playlist from an other user.
Reviewed the entire authorization, should be secure now!