more work on magic auth
re-arrange the order a bit
oopsie
magic auth - it's mostly done or at least all the code bits are written and it looks in theory to be pretty secure and it doesn't white screen. Getting it to actually work(?), well we won't know how hard that will be until we get it on a couple of systems and try it. Magic auth on one box is a no-op because you're already authenticated.
testing begins
now we're into the minor nitty fixes
hidden directory entries
security fixes related to directory access and sites that are off the grid