mental note...

...don't delete 'sshd' user when privilege separation is enabled. *smacks forehead*

thank god for having webmin running on a secure server and being able to check logs, or i never would have figured that one out. i'm such a moron.