set login for every secure page to set username
css fixes; change username only when successful
set gravatar
add message form