Implemented HpChange()/MSpChange() for CNpc (horribly copypasta, will need to clean it up later), started removing some of the temp CUser-specific code from the magic system.