Add require_login to admin filter. This was exposed as an issue when someone accidentally granted admin to the public. No administrator action ever needs to be performed when not logged in.
Merged oacs-5-6 to HEAD. HEAD now installs and passes all core tests. There may still be some lingering problems due to my screwing up the oacs-5-6 branch earlier, I'll be looking into this later.