Create account need to be corrected. Actually anyone can create one !
- need to hide and secure the create account process in Special:Userlogin if the
current
user is not granted the 'createaccount' action.
- probably need an interface to create an account, something like
Special:CreateLogin
Version: 1.5.x
Severity: normal