Major changes around login, auth required, change screenname.
Still needs revisiting. I'm SURE it's not the right way.