In the verification email we would output the URL using HTML
encoded text, so that e.g. & -> &. We don't want that and we know
the URL won't contain user contributed content, so it is safe to
turn off HTML encoding here.

Patch to fix this:
`https://gitorious.org/mediagoblin/mediagoblin/merge\_requests/3 <https://gitorious.org/mediagoblin/mediagoblin/merge_requests/3>`_

We can currently register two accounts with the same email address.
I am not sure if this is a feature or a bug, but it will be fun
when we implement the "forgot password" functionality. Can this be
limited on the database level or where would one check the
uniqueness?

Main page and user page show media galleries. They should be
showing them in reverse order they had been submitted and not
according to ascending document id as they are now.

For that we simply need to append:

::

    .sort({'created': -1})

to the find() query.

While we are it, we should add

::

    .skip(0).limit(30);

too (using variables with those defaults), so we can easily do
pagination later.