diff --git a/README.md b/README.md
index 20cc91ea..7ba95763 100644
--- a/README.md
+++ b/README.md
@@ -53,6 +53,7 @@ turn almost any device into a file server with resumable uploads/downloads using
* [webdav server](#webdav-server) - with read-write support
* [connecting to webdav from windows](#connecting-to-webdav-from-windows) - using the GUI
* [smb server](#smb-server) - unsafe, slow, not recommended for wan
+ * [browser ux](#browser-ux) - tweaking the ui
* [file indexing](#file-indexing) - enables dedup and music search ++
* [exclude-patterns](#exclude-patterns) - to save some time
* [filesystem guards](#filesystem-guards) - avoid traversing into other filesystems
@@ -317,6 +318,8 @@ same order here too
upgrade notes
+* `1.9.16` (2023-11-04):
+ * `--stats`/prometheus: `cpp_bans` renamed to `cpp_active_bans`, and that + `cpp_uptime` are gauges
* `1.6.0` (2023-01-29):
* http-api: delete/move is now `POST` instead of `GET`
* everything other than `GET` and `HEAD` must pass [cors validation](#cors)
diff --git a/copyparty/__version__.py b/copyparty/__version__.py
index 94adef96..8f2de2ea 100644
--- a/copyparty/__version__.py
+++ b/copyparty/__version__.py
@@ -1,8 +1,8 @@
# coding: utf-8
-VERSION = (1, 9, 15)
+VERSION = (1, 9, 16)
CODENAME = "prometheable"
-BUILD_DT = (2023, 10, 24)
+BUILD_DT = (2023, 11, 4)
S_VERSION = ".".join(map(str, VERSION))
S_BUILD_DT = "{0:04d}-{1:02d}-{2:02d}".format(*BUILD_DT)
diff --git a/copyparty/httpcli.py b/copyparty/httpcli.py
index ecd24d20..127ff5f4 100644
--- a/copyparty/httpcli.py
+++ b/copyparty/httpcli.py
@@ -2143,8 +2143,10 @@ def handle_login(self) -> bool:
return True
def get_pwd_cookie(self, pwd: str) -> str:
- if self.asrv.ah.hash(pwd) in self.asrv.iacct:
- msg = "login ok"
+ hpwd = self.asrv.ah.hash(pwd)
+ uname = self.asrv.iacct.get(hpwd)
+ if uname:
+ msg = "hi " + uname
dur = int(60 * 60 * self.args.logout)
else:
logpwd = pwd
diff --git a/copyparty/web/svcs.html b/copyparty/web/svcs.html
index 7678a233..c0df4a24 100644
--- a/copyparty/web/svcs.html
+++ b/copyparty/web/svcs.html
@@ -10,7 +10,7 @@
{{ html_head }}
-
+
diff --git a/docs/changelog.md b/docs/changelog.md
index 8554a250..76e7a4a7 100644
--- a/docs/changelog.md
+++ b/docs/changelog.md
@@ -1,3 +1,20 @@
+▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
+# 2023-1024-1643 `v1.9.15` expand placeholder
+
+[made it just in time!](https://a.ocv.me/pub/g/nerd-stuff/PXL_20231024_170348367.jpg) (EDIT: nevermind, three of the containers didn't finish uploading to ghcr before takeoff ;_; all up now)
+
+## new features
+* #56 placeholder variables in markdown documents and prologue/epilogue html files
+ * default-disabled; must be enabled globally with `--exp` or per-volume with volflag `exp`
+ * `{{self.ip}}` becomes the client IP; see [/srv/expand/README.md](https://github.com/9001/copyparty/blob/hovudstraum/srv/expand/README.md) for more examples
+* dynamic-range-compressor: reduced volume jumps between songs when enabled
+
+## bugfixes
+* v1.9.14 broke the `scan` volflag, causing volume rescans to happen every 10sec if enabled
+ * its global counterpart `--re-maxage` was not affected
+
+
+
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
# 2023-1021-1443 `v1.9.14` uptime