Guarded against sending out emails in response to static asset requests.
#18: Non-validated users can now only log out and resend the verification email. That's it.