Security tweaks related to autoconfirmed users

In emergency mode, users now require to be not only authenticated but also autoconfirmed in order to be /cmd trustable. If they are forcibly renamed, users now get unconfirmed in much the same way as they get unauthenticated.