- switch login password encryption from md5 to AES
- username is now editable again
- prevent creation of multiple administrator in users, all new created users will be defaulted to operators
- prevent deletion of administrator