Status update:

• I enabled the self signup option and it imposes both captcha and a email verification. This is exactly what we wanted so I'll leave this one on
• we still have the initial login bug that self fixes after 10 mins.

I will close this issue and open a specific one to keep tracking the second problem