[smkudelko]

I turned Human Verification on, as that was off. Email verification was always on, but that didn't seem to do anything to stop it. So far, so good.

The funny thing is that we had it set to all new users needed to get approval, however, some of the spam users were able to get right in without an administrator approving them. That's what made me think that there was a leak in the code somewhere.