No email verification

[samgeorges]

When a user signs up they should have their email verified

[Garbee]

As an option to turn on yes. Some sites may not want this behavior since it adds friction to the user getting what they need to do done.

We can easily make an "activated" column as a boolean value. From there have a config option which says if it is to be true or false on account creation with the default option being true. Then if email verification is enabled it can be handled like a password reset token pretty much.

[daftspunk]

I can see three different modes taking shape here:

• No verification - current functionality
• Soft verification - sends an email with a link to verify the email account, with a simple flag but does not impact the registration workflow
• Hard verification - same as soft, except you cannot proceed until you have verified

Thoughts?