Signup abuse detection and blocking 1.17.2

• When merging a user, do not damage the record indicating that source user was detected as a multi-account for target user
• Improve handling of deleted(or merged) users when rendering multi-account detection events
• Reduce some redundant queries when viewing reports

• Fix "Please enter a value for the required field 'username'." when handing a legacy alter-ego login. Note; this did not block logging in

• Fix that legacy token upgrades would unexpectedly cause multi-account reporting to trigger
• Fix "LogicException: Attempted to set 'active' while a save was pending without forceSet " (Tapatalk workaround)

• Fix Missing phrase in user change log
• Option to full delete all user multi-account records for GDPR compliance
• Display user state in multiple-account report

• Fix SQL error during user merge completion

• Fix spam-trigger logs not being saved for rejected users which are not saved

• Fix performance regression when doing user merging

• Add option "Spam check moderated posts" (default: enable)
• Add option "Do not save users rejected on signup" (default: disable)

• Log link spam content checker details when default moderate/reject occurs

• Fix installer new installs with old XF1 AED records
• New content "link spam checker", with explicit allow/moderate/reject rules for domains with a default rule if a link is detected