Security tweaks related to autoconfirmed users
Users now require to be not only authenticated but autoconfirmed in emergency mode. If they are forcibly renamed, users now get unconfirmed in much the same way as they get unauthenticated.