#4 Add before_filter functions

[Evgeny Bogdanov]

To prevent some functions to be executed by robots the before_filter (or something similar) should be added on the server
to prevent request to be executed by the server. Now for the majority of requests the protection is done only on the client.

For example, change_order in SequenceController is not protected on the server,
but only on the client!