- fixed "add to my collection" and other AJAX-y stuff
- added a security question to the registration form to stem the tide of 'bots that have been eagerly signing up since last night. We've nuked the few that have posted--will figure out the others later
- set up some moderator permissions
