Fancy Bread

The latest Metro release (0.4) includes some bug fixes and a significant change to the included security package. After much consideration, I felt it was appropriate to separate the security package into "user" and "security" to facilitate integration with other projects and provide better separation of concerns. There is now a UserService which is responsible for managing the User, Role and Permission objects. The SecurityService is now primarily responsible for managing user sessions.

Additional meaningful updates below:

1. The loginUser() method found in UserService, now checks the Active status for a User.
2. The User decorator's hasPermission() method now accepts a comma separated list of permissions to check.