user commenting;
user password changing;
adding/editing/viewing user groups and permissions;
users changing own password does not require an additional editUser permission;
logger class for logging potential security deficits;