resolves #497 added feature to disable auth with a default user
Merge remote-tracking branch 'block8/master'
merged current upstream/master
reimplemented disable user
Merge fixes