I setup registration with this options:
- Visitors, but administrator approval is required
- Require a verification email, but wait for the approval email to let users set their password.
If user recovers your password before administration approval, he can access site.
This is not allowed.
Setup registration as above.
Register new user
Recover password
Click on mail link
Active
2.0
Code