On registration you can register a new account even if there is already a user with this name (but with some letters lower/uppercase).

An example: There could be a user "alice" and a user "Alice" at the same time.

We need to make decisions on what the thumbnail size should be as a standard... currently it's 200x200. What should be the maximum width and height for resizing media that are are in media "display pages"?

A user needs to be able to reset and recover his/her password.

When doing so, my initial plan is to

• Generate a new password * Generate a password hash for the newly generated password * Overwrite the old hash with the new hash * Set some kind of "user_has_forgotten_password" or "requested_to_change_password" value so that the user is pushed towards changing his/her password, thus avoiding any security issues related to the transfer of the password in plain text to the user.
• Email the password to the user * Ask the user to change his/her password * Reset the "requested_to_change_password" flag * Update the generated password with the new password