Access CRON scripts via URLs and prevent normal HTTP verbs
Add aliases to users
remove permission checks from user alias methods (checks should happen on http action, not in these methods)
Make cron user root
Move login checking from engine to app.yaml
Add directory sync module and cron jobs