Eliminate the `crypto` variable in users.js
Check for sockets with empty `remoteAddress` (!)
Actually disconnect banned users
Don't accept `join` messages from banned users
No need to check if a user is banned multiple times