Update user rights

1. define public $layout = "column2" to every controller to inherit User
Menu
2.  add redirects for unauthorized users to every controller/action

if(!Yii::app()->user->hasUserAccess())
$this->redirect(array('site/404'));