Validate strangers and returning users differently: my register vs login requests

Registration and login look like the same form — email, password, submit. So most codebases validate them the same way. That's a mistake. A stranger creating an account and a returning user proving wh