61 commits

Author	SHA1	Message	Date
Chris Hunt	92a4828f72	Redirect all controllers to login if required ... We want to skip the filter for sessions controller so that we can login and we want to skip the filter for static pages because those should be visible to visitors.	2013-06-04 16:10:10 -07:00
Sam	42494b5bb1	we can't trust CSRF for anon the way it is designed. ... The page they have loaded may be cached we need a different way of delivering the CSRF potentially	2013-05-03 16:43:11 +10:00
Neil Lalonde	cbe0168922	Fix a problem where you might see missing {{sentTo}} value after a failed login	2013-04-18 16:44:56 -04:00
Régis Hanol	b24c1a1ad9	better consistency around email case sensitivity	2013-04-15 02:20:33 +02:00
Sarah Vessels	54c7b1ab63	Use consistent new-style hashes in render calls *twitch*	2013-03-22 14:08:11 -04:00
Neil Lalonde	213d3e5c10	Remove unused code and routes that don't exist in session_controller	2013-03-13 15:21:45 -04:00
Régis Hanol	239cbd2d58	enforce coding convention ... replaced every `and` by `&&` and every `or` by `||`	2013-03-05 01:42:44 +01:00
Neil Lalonde	ff3e012034	Add a link that allows you to send activation email again	2013-02-22 11:49:58 -05:00
Neil Lalonde	c18b85873f	Prevent login until email is confirmed	2013-02-11 11:18:37 -05:00
Jakub Arnold	61654ab8f0	Fix all the trailing whitespace	2013-02-07 16:45:24 +01:00
Robin Ward	21b5628528	Initial release of Discourse	2013-02-05 14:16:51 -05:00