On registration you can register a new account even if there is
already a user with this name (but with some letters
lower/uppercase).

An example: There could be a user "alice" and a user "Alice" at the
same time.

We need to make decisions on what the thumbnail size should be as a
standard... currently it's 200x200. What should be the maximum
width and height for resizing media that are are in media "display
pages"?

A user needs to be able to reset and recover his/her password.

When doing so, my initial plan is to


-  Generate a new password \* Generate a password hash for the
   newly generated password \* Overwrite the old hash with the new
   hash \* Set some kind of "user\_has\_forgotten\_password" or
   "requested\_to\_change\_password" value so that the user is pushed
   towards changing his/her password, thus avoiding any security
   issues related to the transfer of the password in plain text to the
   user.
-  Email the password to the user \* Ask the user to change his/her
   password \* Reset the "requested\_to\_change\_password" flag \*
   Update the generated password with the new password