Security: No password reset or signup confirmation

[byronformwalt]

There does not appear to be a way to request a password reset, and there is no email validation to prevent a user from inadvertently signing up with an incorrect email address that may belong to someone else.