.local is reserved for mDNS (see RFC 6762), and it wasn't properly resolving on my machine. .localhost (RFC 6761) seems more correct.
This allows you to register in the web frontend now, and the login server now checks this before giving a session ID. Note that this is wildly insecure (it stores the passwords in plaintext!) and is duly noted in the USAGE.
Obviously this shouldn't advertise itself as the real game.