dev: syntax highlighting for css/js enabled
dev: no more bogus error after changing a users password