The default login form does not require a password to be entered when registering. Is this intentional? Seems a funny default.
I can't figure out how to require a password. I added db.auth_user.password.requires = IS_NOT_EMPTY(error_message=auth.messages. is_empty) and removed the default='' from the password fields, but it still lets me register without any password... --
