- add optional securid support via aceclient library - use localtime instead of gmtime for log messages so that the timezone is inheritted - allow file authentication for PAP authorization