auth_user: added http headers to deny any indexing of login/special_key by robots
rewrite patterns: fixed issue with login_as
manage_users: login_as() now using true rewrite rules for generating url for redirect