minor security and clarification changes
change the user variable name to 'us' to avoid collisions
now the only one that can delete a superuser is himself
refactor mod panel look; add phone; username is not changeable