...
- Go to register form.
- Fill in all the details.
- Submit to /newid
- New entry added with a new confid and timestamp.
- email sent to user with confirmation link.
- user clicks on link - goes to /confirm
- account enabled - confid changed to new random value.
- response message sent.
Forgot password
- Go to forgot password page
- Enter account + submit to /fpw
- New confid set in entry
- email sent to user with confid
- user clicks link - submit to /npw
- reaches page with usual details filled in - except password.
- submits - password updated - message sent
...
- Go to forgot id page (possibly the same page)
- Enter their email address.
- Submit to /fid
- Email with userid sent to that email.
- If they don't know the password can use the forgot password.
...