Also nullify verification key after verifying in the email confirmation step

diff --git a/mediagoblin/auth/views.py b/mediagoblin/auth/views.py
index 1c010372dc10dccb2c0262cdf9082a494e0c4cf1..0cb3963c5573948f3a7600665f0fa22e8831d23b 100644 (file)
--- a/mediagoblin/auth/views.py
+++ b/mediagoblin/auth/views.py
@@ -154,7 +154,10 @@ def verify_email(request):
     if user and user['verification_key'] == unicode(request.GET['token']):
         user['status'] = u'active'
         user['email_verified'] = True
+        user[u'verification_key'] = None
+
         user.save()
+
         messages.add_message(
             request,
             messages.SUCCESS,