* Protect backend functions against non-admin users.
* Bugfix in setPassword function!