Check existence of database file before install.
Generate API key for every user account.

New method authenticate_key.
Remove previous classes from the alert div.
Use api_key to authenticate user attempting to change the password.
Convert characters to entities.

Avoid successfull XSS attempts by escaping all bad characters
from the username.

Font size reduced in table cells.
Truncate passwords on failure.