Enable auth where wanted; clean up unused files; allow user to change own password