give admin powers to the Administrators group by default
use etree for html5lib, since they recently removed simpletree
refactor the config. finally.
don't allow non-logged-in users to fetch /messages