- added `CMS_USER_API.user_with_credential (...): detachable CMS_USER` that check if credential is valid, and return associated user.
- replaced use of `is_valid_credential` by new function `user_with_credential` .
- revisited the session auth, to allow other credential validations (other than ROC CMS auth).
- added CMS_USER_API.credential_validations to allow authenticating with system other than ROC CMS.
Added new permission to allow by-passing the default ROC-CMS user login/register management:
- new permission to edit its own account.
- new permission to edit its own password.
- new permission to view users details (mostly for user managers).