antifraud: fix bug which blocked a user from actually being suspended
snmpmon: fix bitrot in SNMPPollableSwitch.discover()
profile: use anti-XSRF token
privileges: allow admins to revoke permissions