no more adm/pass.xsl and '403 Forbidden' response instead
Merge branch 'security-improvements' of github.com:kurmanka/acis.r into security-improvements