CVF-1

[rya-sge]

The check of the pause and frozen state was moved inside to fix the following CVF from the audit report, see #153

Here true is returned even if transfers are paused or the origin address is frozen.
Consider returning false in such a case

Nevertheless, this change creates
a) A cross-dependencies between modules (ValidationModule, PauseModule and EnforcementModule) which "break" the architecture
b) Make a requirement the ValidationModule (and so the RuleEngine) which was originally an optional module

Solution:
It makes sense to perform the different check inside the contract CMTAT_BASE since it is like a controller.

[rya-sge]

Finally the PR #222 moves only the ValidationModule inside a new directory called "Controllers" to avoid confusion.
it makes sense to perform all transfer control inside an only module.