#worked mainly on backend

+added permission check
+worked against session spoofing: current ip-adress check
+added user site
+created default template dir
+cleaned code
+and much mor