- make pam module optional
- set better cflags
- avoid some compiler warnings