I've taken steps to insure that this is no longer a concern. There is now an option to have the links in the grablatest and grabspecial.cgi scripts to open in a new browser window. A new script named getfingerlist.cgi is now distributed with archive. This script allows offsite webservers to query the grablatest.cgi script for a list of the latest plan updates. Script is created from a template when System Setup is updated.
Users can now change their passwords themselves.
Admin can enable or disable the ability for the user to change his password. This is disabled by default and can be enabled in the Look and Feel setup. Added ability for admin to turn table backgrounds off to allow the page background image or color to show completely through. Caused the option to be reset when submitted. Added a configuration option to manually set this height when needing adjustment.