Signup flow is confusing

[josephfrazier]

From conversation around https://reportedcab.slack.com/messages/C9VNM3DL4/p1529182432000011:

$BUG_REPORTER [4:49 PM]
It's asking for a password. Do I have one if I've only used the iOS app?

jeff [4:49 PM]
i think you have to register again but it should sync

$BUG_REPORTER [4:51 PM]
I'm getting an error: "Error: Please verify $THE_EMAIL_ADDRESS and try again. You should have received a message." Is that just it's way of saying "Please confirm your email address"?

jeff [4:51 PM]
did you check your email? i think joseph added email validation in the web app.

$BUG_REPORTER [4:51 PM]
Then it sent two confirmation emails each with a different confirmation URL.
The success page doesn't give any link to move forward. So I'll went back to the other page and reloaded and it looked the same. So I resubmitted the form and it now lets me do stuff. That's a weird set of events to say the least.

There's at least 3 issues here:

1. The password field is confusing (we should differentiate the UI between signup and login (see slack), and maybe note relationship to iOS/Android). See also Add "Sign Up / Log In" button to load previously entered info #21
2. The prompt to confirm the email address is confusing See Clarify email confirmation prompt #20
3. The flow after email confirmation isn't clear See below

4. Then it sent two confirmation emails each with a different confirmation URL

[josephfrazier]

3. The flow after email confirmation isn't clear

I've added the following text to the email confirmation and password reset emails, to improve this a bit. Ideally, the confirmation/reset links would lead back to the app, but I don't know if that's possible with Back4App.

Afterwards, click here to log in:
https://reported-web.herokuapp.com

[josephfrazier]

Then it sent two confirmation emails each with a different confirmation URL

I think this is because both the signUp and the logIn SDK methods are each causing an email. Hopefully there's a way to detect this upon signUp and avoid trying logIn afterwards.

[josephfrazier]

Bumping this with https://reportedcab.slack.com/archives/C852Q265V/p1565900149035900?thread_ts=1565899662.033400&cid=C852Q265V

I think it effectively tried to perform a password reset/new account creation, even though I already had an account under that id, and I didn't ask it to do either thing. It obviously failed at whatever it tried (couldn't log me into the web app), but also invalidated my mobile session, and I couldn't get it to accept the old password anymore (whatever was stored in my iPhone keyring).