This is a pretty major update. Much of the code has been refactored to make it more readable. (Check out the source code on github). However, the big change is the implementation of SHA-256 password hashing. No longer is your OP password stored in plain text, actually, it will never be stored in plain text, because we wrote a custom 4J log filter preventing spigot from logging your password! This does mean that the only way to set your op password is through the /setOpPassword command, and before you set the password, your server will not have an OP password. So please, set the OP password. If you ever forget the password, just delete the password.txt file and the password will be reset to default (none).