allow people to sign posts
way better than "secure" tripcodes:
* the private key is never sent to the server. only the public key and signature of the post.
* signatures are verified client-side, so server admins can't fake them.