Revise Access::forbidden() to throw an HTTP_Exception.
Change Auth::must_reauth_for_admin_area() into Auth::get_time_remaining_for_admin_area().
Use to cleanup auth code in Controller_Admin.
Collapse Controller_Admin::_reauth_check() code into main auth-checking routine.
Big auth rewrite of Controller and Controller_Admin - add check_auth() function.
Change "Request::current()" to "$this->request" in controllers.