Closed tarstarkes closed 7 years ago
This needs to be secure in order to avoid someone trying to reset a superuser password that is not a superuser.
Forgotten passwords can now be reset, but there still needs to be a mechanism for keeping the email field in the database unique because as it is, users can create multiple accounts for one email; this needs to be kept to one account per email.
There needs to be a way to reset your password if you have forgotten it.