this is kind of how it already works with just cookies and tokens that everyone uses on login. im monitoring sus accounts more closely now.

an option is to allow them to post (maybe more restricted) and append a 🤖 to their username. maybe allow filtering out bots