various fixes
fix nickname spoofing
fix nerf
durr
redo how user.py works such that a webui is possible in the future