Add ability to send verification message to email address, that user is specified in registration form. Message should contain link with some sort of activation code. When user receives email and clicks on the link, then his account will become active.
Can create functionality based on forgot password logic, because they are very much alike.