TODO list for oasis
-------------------

! check why users get in the UPDATING state, without getting logged out or
  reset to the OK state

* add time limit for user connectivity, ie forced logout after a certain
  number of minutes

* add accounting calls to PAM

* authorization?
