Dont let the play characters be selectable.
use md5 for the session hash, so that the url get shorter.
set user-scaleable to no, so that the controller on the mobile interface does not scale 'duh.