Various config improvements (allowing ability to hide things for client login) and BasicAuth which can't logout

Given the following configuration..

/**
 * Admin configuration
 */
Configure::write('Admin.appName', 'Grass Roots');
Configure::write('Admin.logActions', false);
Configure::write('Admin.coreName', 'GrassRoots');
Configure::write('User.routes.logout', false);
Configure::write('User.routes.profile', false);
Configure::write('User.routes.settings', false);
Configure::write('Admin.menu', array());
Configure::write('Admin.actions', array());
Configure::write('Admin.ignoreModels', array(
    'Admin.ActionLog',
    'Admin.ControlObject',
    'Admin.FileUpload',
    'Admin.ItemReport',
    'Admin.ObjectPermission',
    'Admin.RequestObject',
));