server: exclude rcon userlist variable using USE_AUTH preprocessor directive
server: make use of the new pure list system by default