- enable status now determined by password prefix
- prevent updating of ftp accounts using injection