Hello,
it would really be nice to have the Webadmin write a userlogins file as the other components (roundcube, chwala, (card|cal|web)dav) do.
In my opinion the it's quite dangerous to let the Webadmin providing access to the management console unprotected.