Fix: plug important CSRF vulnerability in cast_vote (temporary hack).
Refactor account credentials in separate table.
Allow users to change their nickname every 14 days.
Get rid of GET CSRF token in edit/fork links.
Refactor username/password/nickname checks, add list of auth methods in settings page.
Fix: don't assume Postgres sorting is deterministic in reset_password.
Remove sitemap_host, replace by host in config.ini.
Initial support for the CCP OAuth2 character auth. Unpolished.
Allow API verification using CCP OAuth2 characters.
Add button to refresh the vCode in settings.
Auto-select vCode on focus.
Create username on the fly when resetting the passphrase of a SSO-only account.
Force vCode when resetting passphrase. Completely unverify an account on user request.
Working auto-signup from the CCP OAuth2 service.
Merge branch 'v0.13.0-hotfixes' into staging
Crius readiness.
Merge branch 'experimental-multiple-auth' into staging

Conflicts:
	src/dispatch.php
Version 0.13.1.