From: Tom Hughes Date: Mon, 20 Jul 2015 20:32:34 +0000 (+0100) Subject: Require a valid session token to resend a confirmation X-Git-Tag: live~4821 X-Git-Url: https://git.openstreetmap.org./rails.git/commitdiff_plain/629ae62b730409b46de6abc8c5166155841b5a00?hp=629ae62b730409b46de6abc8c5166155841b5a00 Require a valid session token to resend a confirmation Make user#confirm_resend require a valid token in the session that matches the requested user, and ensure trying to login as an unconfirmed user sets such a token. Fixes #1010 ---