* updated security concept
* added redirect to /home if access is denied for current user
* added a new flashMessage concept => needs to be discussed
* deleted AccessControler and routing to access, was implemented only for testing purpose