resolved issue 197 - use /dev/urandom for number generation where it is available
resolved issues 198 and 193 - persistent logins now do type/length checks, mt_rand outputs not recorded directly in database or logs as session data
resolved issue 199, phased out use of sha1
resolved issue 200, prevent disclosure of password hashes in logs
resolved issue 203, logging now plays nice with the new fof_make_salt
resolved issue 204, prevent log viewer failing in case where log file doesn't exist
resolved issue 205, admin prefs are now fetched correctly from the database and not overwritten by crud left in db from old schema
resolved issue 201, user agent hashes not stored unsalted, to prevent disclosing users browser if db cracked
resolved issue 202 - don't use database password for logs