fix inconsistent id when applying rules involving sorting
minor amending
fix import and __all__ in ntfs.fs
adapt authentic time deduction to ntfs
add lsn and sn = 1 plots to ntfs