Added ability to change username and password within the applicaiton itself, closes #15 . Note that this revealed an error in the general architecture in that usernames should not be the 'userid' referenced by groups and cookies - using a uuid for these values would obviate alot of the code (see comments in relevant code and issue #16