You've got a function being called before WordPress admin is loaded with will 404 any admin page.
I know you're not on top of updates, but I wanted to let you know that _fill_user() is being included by an include function and not loaded with an action at the proper time.
Great job otherwise, this is just a heads up. It will break in 3.3
