to_api on user core object. deal with unicode and hashpw
activate a default session in pyramid.
Authenticate user with real credentials
forgotten message_part in truncate script