Worked on RBAC, added templates.
Added Content Security Policy boilerplate, HTTP headers.