User authentication is now object-oriented, via UserAuth class
action relay via URI now utilises uniform 'do' argument and $action variable