Implemented #15 and restricted Admin view

- Added new profile page and implemented #15 there
- Moved security restriction from applicationContext to individual
Controller and to jsp via <sec:...>
- Admin page is now only accessible by admins
- Remove unused Controllers