- update composer json to chosse right path
- set vendorPath in application config if not default

app is resposible for setting time zone, so it should also do the
fixing.
+ documentation about the behavior.
issue #210 and #209

set application timezone early in application constructor, set default of UTC if no timezone is configured at all (not in app config nor in php.ini)

Finished SecurityHelper.

- Refactored checking for fatal error.
- Suppressed errors in exception handler in case of fatal errors.