Major fixes to align with new ufront interfaces, should be better abstracted

And a better API in general.  Should be easy to replace DBUserAuthAdapter with
something that checks via a 3rd party service (social media? another web app, ldap etc)