add and resolve todos

owrx/controllers/session.py

@@ -46,7 +46,6 @@ class SessionController(WebpageController):
             if data["user"] in userlist:
                 user = userlist[data["user"]]
                 if user.is_enabled() and user.password.is_valid(data["password"]):
-                    # TODO evaluate password force_change and redirect to password change
                     key = SessionStorage.getSharedInstance().startSession({"user": user.name})
                     cookie = SimpleCookie()
                     cookie["owrx-session"] = key

owrx/form/gfx.py

@@ -1,6 +1,8 @@
 from owrx.form import Input
 
 
+# TODO: generalize
+# TODO: cachebuster
 class AvatarInput(Input):
     def render_input(self, value):
         return """