Allow users to register with email addresses instead of the admin key. * Disallow almost all actions (excluding the ones allowed by guests) performed by unverified users. * Delete unverified users within 24 hours or a configurable interval.