Fix structure of ChangeLog.  Plugin2 (upload): restrict file names to allowed file access groups and supply allowed groups to all HTML forms. Plugin3 (admin): add file access groups.  Add text on group access at many places.  At the documentation, add sec