Registration E-mail Verification

[bensonchan]

Need to implement e-mail verification to validate e-mails. Will also extend Django User to be able to implement this and require e-mails on registration.

[aleccool213]

I should extend this and verify if a user has confirmed there email on login. Or is that not needed?

[bensonchan]

Basically, if a User has not confirmed their email, their is_active = False. According to https://docs.djangoproject.com/en/1.3/topics/auth/#django.contrib.auth.models.User.is_active it's not mandatory that is_active is checked. You can easily check it yourself if you want, and that would be all you need to do.

[aleccool213]

your stuff looks good though, merge it with master

[bensonchan]

Not yet, need to fix up login and I think there's a small vulnerability somewhere. Will do all that and more tomorrow.

[bensonchan]

I've patched up everything I could think of, awaiting one more check before merging.