Completely finished user management (incuding AJAX multi-actions); missing permissions