big changes! Now doing security in the reflector. Messages are not sent until a user is logged in. The login API is much different, and requires you to provide the websocket client ID, the username, a password, and the instance and app name. Also, the api no longer allows an anonymous post to overwrite the profile data.