- Confirm after verifying email / loggin in
- Get rid of the hub, use only simple modals
- Create simple 'settings.get()' methods.
- Add settings for Welcome / Forgot password email titles and templates.
- Do not include 'username' in email templates if username not required in app.
- Do not indicate on the client side whether forgotten password exist in db.
- Basic validation of forgotten password form.
- Entry token expiration period. In entry email, notify when will it expire.