Don't allow an account to be logged in until approved by an administrator

[Cifram]

When an administrator approves an account, it should send an automated e-mail to the user telling them they've been verified, and providing a link to their profile page, so they can fill out their triggers and whatnot.

[a-lost-shadow]

I believe this may already be part of the django authentication package. I vaguely recall working around this when I originally implemented the site.