Revision 354144

Added some doPrivileged() blocks to URL Handlers. The new SecureAction class
is intended to be used framework-wide for code that needs to perform
privileged actions; the goal is to consolidate similar security code into
one place and eliminate the need for many different PrivilegedAction classes.