Add documentation for

* 'always set user to admin if no user given'

* plugin-fetchinfo
* plugin-install
* plugin-list
test for plugin-fetchinfo
if no category provided, search in all of them
Rewrite file-upload to use internal moodle lib instead of direct SQL injections