No matter what type of web application you are building, there is usually a generic template of features/modules that always need to be included.
Note: These are high level modules, the details will vary per implementation.
Here is my list, care to add to it?
It really depends on what type of web application. For example, if its not publicly visible you can scratch many of those things off your list.
As mentioned, it really depends upon if the site is outward-facing or not. Outward-facing sites generally need more consideration before going live. Adding to the list, I would recommend: Shopping cart (session management?) SQL wrappers (methods for inserting, deleting and selecting from DB's)
Good list. Here are a couple more:
Performance/Scalability, although it's more of a metafeature, than feature.
Some means of rolling out updates - will vary depending on the nature of the application ie is it hosted as a service or distributed.
Also most applications these days involve some kind of RSS/Atom output, whether that's to provide a feed of data within the application or as part of a development blog keeping users posted with what's going on.
Following on from the above, there's usually a need for import/export routines to get data into and out of the system en masse.
This question/results seem like a lot of big upfront design. All of the items are valid and may become important, but what's the value in spec'ing a giant list of features/functionality until you actually need it? I'm not talking about ignorance of things like configuration or security, but something like "reporting" could potentially be an entire application by itself...
In my opinion if you tackle these on an "as-needed" basis, you'll (a) do a lot less of them, and (b) find the most effective solution for the actual need, not the projected need.
As was already alluded to, the quality attributes (the "-ilities") are going to depend on the particular project. But from my experience, extensibility is always a great one to have; plugins and APIs do wonders in garnering the community activity and interest that is so essential for a lot of web applications.