Added functionality to ensure only non-deleted, confirmed, non-suspended users with an 'auth' method that's not 'nologin' can use the web service
Merge remote-tracking branch 'origin/restful' into restful