disable tracing by default
rework tracing messages
add anti-forgery to login
add paging support to user admin page