Require new users to verify their email

At present, new users get access to their new account right away. The site should provide some resistance to spammers by requiring a valid email.