Filter out fully anon-games (with a grandfathered whitelist)
Add a "games you administrated" section
Display multiple errors correctly
Add unique lowercase indices on username / email address
Ensure usernames are case-insensitively unique. Use case-insensitive comparison during login.
For registered users, show the real username instead of name from setup command
Add a player info page
Temporarily switch back to using the game-specific name, but keep link to username
Show game name in top bar.
Properly capitalize display names again
Add player.displayname to schema
Use the DB-defined displayname
Fix error detection in game creation
Add minimal settings page
Centralize creation of DB connections (to make enabling utf-8 less painful)
Allow any letters in the display name, but properly escape it when used
Remove the last cross-site ajax support code
Set a CSRF cookie
Verify the CSRF token in appropriate places
Print a bit more info for CSRF check mismatches