signup link, fix goto js function
refactor token creation
add base64 encoding/decoding of cookie
increase email length
block bad user assignments