Sage-Bionetworks/Synapse-Repository-Services — pull request #26 by jay-hodgson (2012-07-24 17:51:59+00:00)
Title: PLFM-1319: close security hole in registration process

Issue a special registration token when creating a new user (sends in an email). The registration token contains the encrypted session token. Caller can use the registration token to change the user's password, but that's all that can be done. After that, initiate a new session to get a real session token (can't avoid the ToU requirement)