Design decisions

Miscellaneous design decisions

Account activation: re-send activation e-mail

This one is not implemented on purpose.

We want to use the "Active" field also as a mean to temporarily suspend an account (resource abuse, suspicious activity, bad behavior) to simplify the code. User will not be able to re-activate the account on his own, because the confirmation e-mail is sent only once and then the account is released after a few days if the e-mail is not delivered / acted upon (so this feature is not really needed). After the activation is completed the same activation token won't work anymore. Same goes for password reset: you won't get a new token unless your account is already active.

If we add this feature, then the users will be able to "unban" themselves on their own.