Safer Sign-Up and Email Verification

Email verification links now work once and cannot be used for anything else, and the password rules that already applied when you change or reset a password now also apply when you sign up or accept an invitation.

Thanks to Sakar Bhandari on LinkedIn, whose report prompted this.