Security polishing.

 * Require uses to login before accessing anything other than the home
page, login, or password reset.

 * Only show the entities menu to logged in users.
Fix the security restrictions

 * allow unauthenticated access to the sword api

 * fix the tests in the user bundle

 * remove the default tests for bundles Core, PLN* - they were failing
and contained nothing of value.
Merge pull request #10 from ubermichael/security

Security polishing.