BUGFIX: login was broken when login was required
FIX: kick system badges out of other
FIX: allow position to be changed post seed
FEATURE: editable badge groups
FIX: regression in seed
SECURITY: do not follow redirect by default when downloading hotlinked images