I haven't read all the above messages, so excuse me if I duplicate someone else's suggestion. Members with registered names could have to also have to login with a chosen secret password if they want to use the name. It could be made possible to do this from any computer, not only the one holding the member's cookie. Anybody trying to use a registered name without the login would get a message that the name was in use and that they need to choose another.