Authentication enables a user to register an account, by creating an email and password on the site or by signing in with social providers such as Facebook, Google, Microsoft Account, or Twitter.
07/29/2015- updated to Identity 2 which provides these additional features.
It's a best practice to confirm the email of a new user registration to verify they are not impersonating someone else (that is, they haven't registered with someone else's email). Email confirmation provides only limited protection from bots and doesn't provide protection from determined spammers, they have many working email aliases they can use to register. You generally want to prevent new users from posting any data to your web site before they have been confirmed by email, a SMS text message or another mechanism.
Once you confirm your email address you are allowed to proceed with the login.