Made media URLs easier to configure.
Added a log out feature, and all auth URLs are now public, because they are hard enough to hide and it makes little difference. Logout and login URLs redirect in a sensible way. CSS and so on has been restructured to put more in the context of the global site.