------------------
- Protect the control panel with a specific permission so it can be
delegated.
[davisagli]
- Advise defining ajax_load as ``request.form.get('ajax_load')`` in
manifest.cfg. For instance, the login_form has an hidden empty
ajax_load input, which would give an unthemed page after submitting
the form.
[maurits]
- Change theme editor page templates to use main_template rather than
prefs_main_template to avoid inserting CSS and JavaScript too early
under plonetheme.classic.
[danjacka]