diff --git a/doc/TODO b/doc/TODO
index 51d6b39..a02bebd 100644
--- a/doc/TODO
+++ b/doc/TODO
@@ -4,3 +4,6 @@
 - find out the reasoning behind define(POST_|GET_)
 - when a user gets deleted from database, he should not be
   logged in anymore (name not shown on top right)
+- Make users inactive by default when registered newly
+  - have to be activated by admins
+- Deactivate user registration