Fix hardcoded URL.
Allow login by username or email.
Approval and rejection by administrators.
Make trustees email address configurable.