This update adds a simple IP check to prevent abuse with same IP accounts. I'll add better prevention for VPNs later on.
Please add this to your config.yml:
allow_same_ip_referrals: false
Left optional incase there are different players from within the same household.
The plugin is also much smaller now, opted for java's built in http instead of using apache's library