Improvements for IAuthenticator and drupal7

Allow better disconnect between ckan and IAuthenticator extensions

* speed up `user_show` action
* allow `user_update` to set sysadmin
* some new template blocks
* get `c.userobj` so extensions do not need `model`