Yeah, on TrailBehind.com proper, I have an auth system in place, and a bit of javascript to let users log in mid-action.

For this demo, there is no auth, so a bot could definitely spam it, but it will work ok on your site if you have some sort of auth set up.

Later, I also want to integrate captcha with this, and I'll release my login ajax as an add-on.