added missing skin image
added auth check on creation using the REST API
made one or more found objects consistent
added auth rule for Identity records access
added support for status checks to admin-users