Detailed Description:
As I maintain securelogin module, it would be nice, if there's a way to show
customized message to user, for example to inform that s/he should check email
and follow the instructions.
Maybe sending event after successful login and method which is hooked into that,
returns object which contains a message and is login allowed. This event could
be used also in some other ways to check if login is allowed even when
credentials are correct.
Now there is LoginPost-event, but with that it is not possible to set any custom
error messages. User can be kept out by resetting session, but I don't think
that's the best way.