Now I know that a lot of people use auto refreshes for different things but how legal are they? Example: using auto refresh on the blue building page to obtain password event (if all the other requirements are met) so you're not sitting there spamming the refresh button until your fingers are numb. Thanks :)

ehh, they're one of those things that are technically 'cheating' but it's not really that big of a deal, especially if you're using it for something like getting the blue building password, as it's not giving you an advantage over any other users. in any case, it's not the kind of thing that gets enforced, so it's not like you'll get in trouble for it.