- Implemented.

Rebuilt embed-example.html with inline, full-screen, and popup examples.
Fixed host-page/frame scrolling and contained reply navigation.
New logins now transactionally replace prior sessions; displaced clients 
return to login.
Added per-user session/IP locking with automatic SQLite migration.
Added modular Spam Control dashboard for locks, honeypot, and CAPTCHA 
settings.
Moved CAPTCHA controls out of Plans & Platform.

config.json

@@ -13,7 +13,6 @@
     "replies_enabled": true,
     "reply_max_depth": 4,
     "session_lock_ip": true,
-    "session_lock_cookie": true,
     "allow_guest": false
   },
   "archive": {