Accounts have to confirm their email address before they can sign in. Links last 24 hours and can only be used once.