fix is-suspicious on profile pages
remove unused variable
add a "fake" mode to `/on/confirm.html` to ease debugging
replace the remaining uses of `{% block box %}`
switch title and subhead in `www/%username/account/close.spt`
remove unused variables