Added unique key generation to player sessions, part of back end to prevent future CSRF exploits.

All image tags have been disabled across the site due to security concerns, see my blog for more details.

Players can no longer astral blast buildings protected by friendly guards.

Fixed bug where level up on a multi-attack would display incorrect level of a player.

Secret achievements will no longer show in the combat log when they reset.

Fixed changing the rat you're betting on, so the achievement will add 1 point after resetting itself to start over.

You can now only progress once per rat race in 'Rattin Luck' and will get no progression if you also win a bet in that race. Losing in any form will continue to reset 'Rat Race!'

Fixed 2nd secret achievement to now correctly work.

Fixed 'Rat Race' achievement to now correctly start on the first win.

Added display engine support for dynamically loading CSS files on a per page basis.