Registering a user without being logged in
Currently it is possible to send a post request containing parameters to the register handler without being logged in and the user is created. Most likely no authentication is set on the POST handler.
Edited by Andreas Farley