Don't know if this is in the plan to turn on... but we should probably turn on registration confirmation... it can't guarantee no spam, but it will at least add one more layer of protection, and people are used to it as a concept
