Reworked the user session management, which moved some logic out of templates into code, as it should be. Also added a bit more flexibility in configuring what anonymous users can and cannot do. Also added admins.