Update instructions on 'forgot password' dialog to include bit about guild name. Modify app to only listen on localhost (i.e. traffic passed from nginx/Apache).