works

likely some stuff still doesn't work properly...

happen on install

for auth correctly on install.

information about whether the user's account is available or not.

Added a class that all auth classes should extend, that listens for events
to do with account activity.

user logs in, make sure that the inactivemailsent flag is off, and turf
the user out if their account is inactive

has a bit more overhead now but they're handled much nicer. Exception
and MaharaException should now NEVER be thrown directly

bugs to do with the $SESSION -> $USER change.

done.

wrapper around $_SESSION, and $USER deals with system users and their
preferences.

pieform(). Removed a couple of unnecessary functions. Added the institution
dropdown to the transient login form.

checkout for the moment.

Modified all forms to use the new one.

Changed the file_content_check script to ignore language strings with
variables in their name.

some safe_require calls to be simpler now that better defaults are
available.

robots to move about the site.

while users are browsing around the admin section, as they may have been
made not an admin anymore, or even made into an admin while they were
logged in.

  - Put the change password form in a fieldset.
  - Use password_validate for validation - moves almost all password validation
    into one place.
  - Login forms now check to see if javascript and cookies are enabled, and
    don't even display themselves if they're not available. Added a
    function to generate the necessary js for this.
  - Check for the test cookie being set in login_submit(), and redirect to
    the home page if it's not.
  - Added todo about using new transaction stuff

the URL to draw a login form.