This is great! But I’m not keen that the site isn’t using HTTPS by default, nor the links in the verification emails.