* changes: Close security hole allowing normal user to become admin Remove the generateHttpPassword capability