Updated Excluding Urls, Relocated Logout under User

NOTE: If controller name is given without an action name, then it will
have complete access to its scope else limited to that action