form, and made the set_error method public for the same reason. Removed
a debug line.

at.

function so it can set errors.

and stores data from the user database across sessions (saving a db lookup)

interface and pluggable element types at the moment, though it needs some
cleanup yet.

auth_internal plugin.

lookup on the application database.

and then persist for the user even if they log out (note: session != login
session!).

This means that bots crawling the pages won't get sessions, which is a good
thing.

Made the authentication logic more solid too. The transient login page is
now implemented to a basic level.

support to the default exception handler for passing its backtrace through
to be displayed, and also passing the correct file/line numbers, which
makes them far easier to track down.

script name when logging if the script is actually in the docroot.

to get the sanity checks done as soon as possible.

Include the auth page, but only after we know what theme we are supposed to
use, which allows drawing of correct login boxes.

later or someone else can look while I'm away

xmldb doesn't like empty xml files. we need to probably test this with
is_readable - it's reasonable to assume that artefact plugins might not
have db tables

already in the installer