Rooted! 
The user part stretched my limits on modern web apps and authentication schemes. The root part was pretty straight forward, but still pretty fun.
Nice box @qtc. You can always tell how much time and effort you put into these. It is appreciated.