User capabilities for site
+ register
+ validate first factor
+ login
+ one-time password login via email
+ logout
- change pass
+ restore pass
- second factor auth API
- auth by external service
+ user profile editor
+ user session
- user fake session
- user status