move www/*.php code to Controllers
add access controller, ask user if he wants to authorize the app