I am using the login extra (latest version) in my project for an auction site.
All things work fine with register, lost password and so on.
But, a test-member found one issue.
#1 He registered on the site
#2 He recieves the welcome email with link to activate
#3 He clicks the activate link
#4 Now he doesn't login, instead he clicks the forgot password link
#5 Voila, he is now logged in without typing his username and password.
I can reproduce the whole scenario.
Is this a bug, or have i missed a parameter?
Regards
Sven
