auth: re-enable empty pass login for register
acl: allow authors in user:sysop to be sysop
apibbsd: detect real ip