ignoring files stored in custom/
allowing admins to delete users
auth salt is now configurable via config
bugfix