Checking for special characters in usernames + password strength
Added the secure flag to cookies (and 'adhoc' SSL when launching using web.py)
Using HTTPS by default for the persona audience