- install: touch auth.log
- login: write success/fail to auth.log
- cron: log rotation for auth.log

- Added new web folder named private to web folder layout. The folder is intended to store data that shall not be visible in the web directory, it is owned by the user of the web.
- Changed ownership of web root directory to root user in all security modes to prevent symlink attacks.
- Apache log files are now owned by user root.
- Improved functions in system library.

- Fixed: FS#2292 - monitor_tools.inc.php uses /var/vmail and not the mail directory specified in server config
- Changed code comment in login/index.php file.

Added wrappers for several base filesystem functions like rename, copy, chown, chgrp etc. to system lib.

Bugfix: Spaces need to be deleted before cron save, because they are IGNORED on validation but lead to a non-functional cron.
Storing minute / hour / etc. values like "1, 23, 26" (with spaces) is allowed in validation and interface but leads to a BLOCKED crontab file and to non-functional crons of the whole web user.

This option can be enabled under System > Server config and is named "Web folder protection".

Implemented: FS#560 - Add support for APS (Application Packaging Standard)

Improved: FS#2131 - skip network reconfigure requests on mirror servers that are for a different server_id

Implemented: FS#2131 - skip network reconfigure requests on mirror servers that are for a different server_id

Merged revisions 3049-3051,3053-3054,3058,3070,3074-3077,3082,3086-3088,3091-3092,3094-3095 from stable branch.