Ive noticed when doing my admin application, lots of it is spam from fake emails.
Users can create more than one account just by typing
Create account: (example)
email:
[email protected]
password: ...
Maybe an email activation or a limited to one account per IP address should be...