Rebuilt the account system from scratch.

No account IDs.
No secret questions.
No flat file nonsense.

Everything tied to email.

Real email required.
Temp password sent.
Forced password change on first login.

It works.
Properly.

This removes most of the old account problems in one go.

Security updated to modern standards.
Password hashing strengthened significantly.

Feels solid.