works

likely some stuff still doesn't work properly...

happen on install

for auth correctly on install.

information about whether the user's account is available or not.

Added a class that all auth classes should extend, that listens for events
to do with account activity.

user logs in, make sure that the inactivemailsent flag is off, and turf
the user out if their account is inactive

has a bit more overhead now but they're handled much nicer. Exception
and MaharaException should now NEVER be thrown directly

bugs to do with the $SESSION -> $USER change.

done.

wrapper around $_SESSION, and $USER deals with system users and their
preferences.

pieform(). Removed a couple of unnecessary functions. Added the institution
dropdown to the transient login form.

checkout for the moment.

Modified all forms to use the new one.

Changed the file_content_check script to ignore language strings with
variables in their name.

some safe_require calls to be simpler now that better defaults are
available.

robots to move about the site.

while users are browsing around the admin section, as they may have been
made not an admin anymore, or even made into an admin while they were
logged in.

  - Put the change password form in a fieldset.
  - Use password_validate for validation - moves almost all password validation
    into one place.
  - Login forms now check to see if javascript and cookies are enabled, and
    don't even display themselves if they're not available. Added a
    function to generate the necessary js for this.
  - Check for the test cookie being set in login_submit(), and redirect to
    the home page if it's not.
  - Added todo about using new transaction stuff

the URL to draw a login form.

being for internal authentication only. Removed some unnecessary debug
lines.

  - changed auth_check_password_change to just source $USER directly
  - implemented auth_get_authtype_for_institution
  - changed auth_check_password_change to allow any authentication method
    to change the password, if they specify a config url or if they
    implement a method
  - changed change_password_validate to allow any authentication method to
    validate a password
  - changed change_password_submit to allow any authentication method to
    update a password
  - added a register link to the login box
  - inlined the expire/suspended checks, since they only need to be checked
    in one place. Allowed any method to say who is suspended