-
-368 commits to feat/bootstrap since this tag
Registration now requires a confirmed email address. Nothing in the portal
opens until the link in the confirmation mail has been followed.An account can see every browser it is signed in on, and end any of them or all
the others. Sessions moved from Redis to the database to make that possible,
which signs everybody out once, on this deployment only.A sign-in from a device an account has not used before sends a warning. It
recognises devices by a long-lived cookie, not by IP or user-agent, so a train
journey and a browser update do not produce one.Mail has a layout of its own — tables and inline styles, no image and no web
font, and a button dark enough to read white text on.Downloads