If an invite code gets into the wrong hands and turns into a swarm of trolls on the site, the admin can ban them from the invite code page, except for the ones who haven't confirmed their emails yet.
Change the user page to show the ban button to admins for users with unconfirmed emails, change unban_user to set the user's status correctly for users with unconfirmed emails, change login_with_token to refuse to work for banned users, and fix is_email_verified to not always return True.
If an invite code gets into the wrong hands and turns into a swarm of trolls on the site, the admin can ban them from the invite code page, except for the ones who haven't confirmed their emails yet.
Change the user page to show the ban button to admins for users with unconfirmed emails, change
unban_userto set the user's status correctly for users with unconfirmed emails, changelogin_with_tokento refuse to work for banned users, and fixis_email_verifiedto not always returnTrue.