hipster decapitalization rules! @thebruce and @elliotttf win. Also I was confused. Ref #1
Rewrite forms to eliminate [on*] attributes and pull it into main script
Clean up the signIn() function
Doh! That's an index, not an object. Ref #7.
Validate votes using config.points as a whitelist. Ref #3 (See notes)

This commit also rewrites the config file to include all point
values as strings. Really, once they are written to the DOM of the
client, they're traded back and forth as strings anyway. This lets
us validate by whitelisting (using indexOf) as well as include
point "values" that aren't numbers. In this case, I traded 100 for
a frowny face because in our process, if you even think something
might qualify as a 40, it's too big.
Use regex to strip 'bad' characters from nicknames. Ref #2
Handle voting more safely; use socket.id, not client's mySid. Ref #9
Merge dev -> master: Security fixes, better validation, some cleanup:

- Use socket.id, not mySid; closes #9
- Sanitize nickname; closes #2
- Validate votes; closes #3
- Fix nickname duplication checking; fixes #7
- Decapicalize 'scrummy', ref #1