Create Account flow: an activation email will be sent to the given e-mail, with activation link. The user will have to activate his account (by clicking the link) before he can use it.

The link is created using crypto library. It contains the timestamp and the username. Encrpytion is crucial so hackers cannot intercept or forge links.