Added isUser and isAccountOwner constraints. Added security-manager webapp. Added security constraints to templates.