sending 'bind' message to child proc instead of SIGCONT signal, which is not understood by Windows installs
refactored login process to be a form submit instead of ajax-redirect, implemented error message parsing using req.flash
added connect-ensure-login and allowed npm to alphabetize the dependencies listing
changing admin API calls to return 404 if unauthenticated, and redirect user to login for regular URL. closes #1885
more stuff using new returnTo behaviour
allowing /user to also work in addition to /users
added back error:no-user
added disabled class back when form is submitting... aka clickspam handling