Fix: don't assume Postgres sorting is deterministic in reset_password.
Remove sitemap_host, replace by host in config.ini.
Initial support for the CCP OAuth2 character auth. Unpolished.