implement (un)delete and (un)ban user
support disable ACL checking
implement getUidByUsername
return uid in usernameExists & nicknameExists
support override 'root' in create_root_account
new ACL rules
implement banned/deleted in login action