UserPanel: is rendered only when headers are not sent [Closes nette/security#7]
composer.json: requires Tester ~1.3
added contributing.md