Update to latest meteor. Surprisingly painless.
Fixes #8. Problem was that tlDrawn remained true set after one user logged out and another in. Raises cross-user security issues I had not considered.