Explicitly check for authorization when changing nicknames.  For #98.