This should nominally work but it's a hassle to test on my own.
Not requiring google login to follow a /session/:id url, plus cleanup associated with that.
Somes notes and logging around user objects.
Puts user images on the page.
Wrapping the page so its layout is not totally stupid.
Added a page at /h/
Added some actual content to permalink intro, including a silly little widget to 'create' a permalink.