- query media by hash
- media upload
- account registration
- use email for confirmation and reset, but don't store email; instead
store a crypt(3) of it