[Locke1689]

Someone should double check me on this because I actually couldn't get the account to correctly activate but I think there's a POST CSRF vulnerability on the "new group" button in the profile page.