app.htm: refactor
rbac modules: per role module loading
controllers: less base control
mw sendFile: fix error path
userman: updates