Load all submissions in one query for efficience. Use sub instead of replace so not replacing #1234 with #123 links. Catch short codes on end and start of line.

Add next query to social login link so next redirect is done when needed. Set SOCIAL_AUTH_GOOGLE_OAUTH2_WHITELISTED_DOMAINS to STAFF_EMAIL_DOMAINS if not set.

Switch to django-pwned-passwords instead of django-pwnedpasswords-validator, better error handeling.