Cool Auth

Session System

If a player disconnects and rejoins from the same IP within 10 minutes (configurable), they are automatically logged in without typing their password again.

Security Kicks

Added a max login attempts limit. If someone enters the wrong password 3 times, they get kicked to prevent brute-force attacks.

Visual & Chat Hiding

Unauthenticated players now have a Blindness effect and cannot see the server chat until they log in. They also can't move items in their inventory.

Admin Tools

Added /coolauth unregister <player> to delete an account and /coolauth setpass <player> <newpass> to force a password reset.

Player Commands

Added /changepassword <old> <new> so players can update their own credentials.