administrative links
prevent deleting last user
use basic http authentication to access who_bought.xml