Don't use real names and emails for test sessions
Cope better with exported sessions
Put a title on the finish_form page
Disallow (re)assignment of exported sessions