Updated install instructions with new SQL script and first user generation
Upstream declared a new local lib inclusion, but that local lib doesn't exist (yet?)
bugfix: we were trying to use $user instead of $username
better warning
auth_validatelogin only runs if there's an username to work on