Feature/security

login, registration and forgot password changes
I think we need this one.  See index method as Image.onlyPosters is being used.  I'd like to explicitly keep imports that are used in methods.