User capabilities for site

	+	register
	+	validate first factor
	+	login
	+	one-time password login via email
	+	logout
	-	change pass
	+	restore pass
	-	second factor auth API
	-	auth by external service
	+	user profile editor
	+	user session
	-	user fake session
	-	user status