add hacking notes on security
add twisted logging
allow specifying the username
recurse through failure to get tracebacks
fix unicode username/password