log user registration, etc
only show toolbar if user has access
protect configurationpage; fixes #577