REF: completely refactored authorization and authentication system
FIX: i18n/l10n for settings controller
FEAT #84: this implements most rights based on badges

Still to do:

- flagging right
- retagging right
- create tags right
- create tag synonyms right