Bot protection
Google reCAPTCHA on the sign-in, sign-up and RSVP forms, which tells a person apart from an automated attack. With this off nothing is sent to Google and the forms still work — they are rate limited instead, so a handful of attempts from one connection in fifteen minutes.