based upon a patch submitted by Jason Townsend (Apple).

forward-slash paths to Windows back-slash format.

for publication)

now described in RFC 3698.  Would be good to implement these.

cleanup rwm overlay; init/destroy session cookie; strip (optional) leading 'rwm-' from config directives

PP_accountLocked error for locked accounts. (Gives too much information
to attackers.)