If you register a new account, the activation email includes a URL with an http:// prefix, instead of https:// When clicking that link, the site responds by silently redirecting the user to the front page, and the account is not activated. The new account can be activated successfully by manually pasting the URL into the browser address bar and changing the scheme to https.