make sure reset password notification does not hide automatically; add manual close link to persistent notifications (closes #569)
fix boolean wrapped as a string literal passed when saving user (closes #568)
rework updater to use github tarballs; add some additional logging and
prevent old directory being renamed pointlessly in a few cases
(closes #559)