passwordauth, by creating a passwordless account (making up a username,
not using the email address as the username thankfully). That account can be
upgraded to a passworded account if the user follows a link in comment
- mails to login. So there is considerable overhead between that and
+ mails to login. So there is considerable overlap between that and
emailauth.
* Adapting the passwordauth reset code is probably the simplest way to
implement emailauth. That uses a CGI::Session id as the entropy.