Updated to include username disclosure policy, cause I was a nonce and forgot to include that in the initial posting. If there's anything else missing, just flail at me.