added w:'all' to addUser cmds in authCommands.js #400

Hopefully this makes the race harder to hit
Merge branch 'bugs/400'