Add user lookup function (luser), hide user hashes from browser, relativise DB path, add TODO, update README, check for database before running.
Add password changing, add refresh_user(), add {{ error }} to all pages, remove class/password/posts from profiles, migrate fully to luser().
Fix bug with refresh_user(), make port configurable.