work in progress permissions rework
bug fixes and client understands to 'user' message
button to generate admin account when it does not exist
users can login, logout, edit username/password
show admins list of users in settings
admins can update permissions for users
roadmap update and other README cleanups
admins can delete users
admins can approve validation requests
restore mpd support for password command using username/password

fix changing the permissions for the guest user, it affects all
non-approved users now.
subscription auth handled correctly

event subscription fails without the correct permissions, and when
a user is logged out, they are unsubscribed from things they don't
have permissions for. client automatically resubscribes when
permissions change.
Merge pull request #320 from andrewrk/permissions-rework

permissions rework
fix crash for unauthenticated mpd commands
introduce Events tab and other misc changes

 * server enforces stringness and max length on login params
 * display connected users in events tabs and whether they're streaming
 * style up the import tab a bit
send update to client when client disconnects
fix typo
fix permission checking for downloading anonymous requests
events and chat

 * show list of events in client
 * all users know about all users
 * use keese for event sort keys
 * events reference users by id
 * press t to focus chat box
events ui: show date on hover
admin ui: fix ability to approve requests