think tank forum

do we want to send the new email address a validation code?

it's kinda stupid considering how easily such measures are subverted.

I think the email a password way works fine