[http.users] Improve comments
[http.users] Restrict log perms

Ensure an user cannot alter web server logs
[http.users] Configure log rotation