Make use of the new 'view notifications' permission on the dashboard
Fix permissions-related bug in menu appearance
Fix multiple privilege escalation vulnerabilities (thanks to X Chen for advice)
Restrict access to login-related pages for authenticated operators
Hide small login form on front login page
Add variables check into the thread processor view