improvements on authentication. Matching profile settings are now part of server.settings.Authentication object. If a profile is not found, the logout button still shows up and even allows for admin if user object has mail property and the user's email is in the admins list