QueryFilter(filter, ignore) accepts now filter == null.
Multi-tenancy: panta rhei.
Access for super admins fixed.