Big improvements in authcore, including the @restricted decorator, designed to be used to tighten access to code not in authcore (i.e. allow access to a method only for desk workers, etc.