mattpointblank’s Twitter Archive—№ 17,478

@mirmayne I tend to treat this as a new registration, eg. it updates their user record with the new address, but then they're logged out and must re-confirm their email. Same token flow as initial account confirmation, no need to store the email address in sessions etc. (Node not Ruby tho)