fixed some bugs with singleton and remobed password from session.auth.user

gluon/globals.py

@@ -419,11 +419,11 @@ class Response(Storage):
         BUTTON = TAG.button
         admin = URL("admin","default","design",
                     args=current.request.application)
-        from gluon.dal import thread
-        if hasattr(thread,'instances'):
+        from gluon.dal import thread_local
+        if hasattr(thread_local,'instances'):
             dbstats = [TABLE(*[TR(PRE(row[0]),'%.2fms' % (row[1]*1000)) \
                                    for row in i.db._timings]) \
-                           for i in thread.instances]
+                           for i in thread_local.instances]
             dbtables = dict([(regex_nopasswd.sub('******',i.uri), 
                               {'defined': 
                                sorted(list(set(i.db.tables) - 
@@ -431,7 +431,7 @@ class Response(Storage):
                                '[no defined tables]',
                                'lazy': sorted(i.db._LAZY_TABLES.keys()) or
                                '[no lazy tables]'})
-                             for i in thread.instances])
+                             for i in thread_local.instances])
         else:
             dbstats = [] # if no db or on GAE
             dbtables = {}