We have added a low security script to prevent imposters in chat.
As long as you keep your chat access url secret, there will be no problems.
This way requires no extra user input and is expected to generally control all related problems with random people spamming or impersonating others.

You still need to remove the /nick command then so players can't change their names, although I like the above ideas.

hm, so which idea here was implemented?