Add email verification step when a user creates a new account

[mmbotelho]

Problem

Why should we verify emails on account creation?

Essentially, what it comes down to... is are you dealing with USERS or PEOPLE on your site.

Most companies prefer to have a relationship with a person. Exceptions would be reddit and other sites which are designed with anonymity in mind and are almost purely online communities.

1. A verified email is a verified person behind the email. Prevents some simple bots
2. A verified email can reduce a person's frustration if the email was typed in wrong. If a user joined some music service, made a bunch of playlists and then logged out and forgot the password... it would be helpful if they could reset their password properly. (...)
3. A verified email allows you to contact a person about security breaches or other important site issues, site announcements.
4. A verified email prevents abuse. I constantly receive spam and information from sites I never signed up for because there are several people with my name who either sign up for services and mistype their email address or they're signing up for some random hook-up site that doesn't require a verification (for obvious reasons). If these sites verified emails, I would get an email asking for verification and promptly ignore it.

Source

Solution

Create an email verification step when users create a new account. This is related to #843

[taoeffect]

Depends on #1490

[taoeffect]

Depends on #1490

Actually, it doesn't, as this doesn't touch contracts per se, it's just related usernames and the ability to "activate" (give certain permissions to) a username, and can be done independent of any contract stuff.

[Silver-IT]

@leihla, I don't think we have design for this email verification steps.