I recently found two identical users in DB.
Every data columns have same values (including 'created_on') except password and last_login.
My guess is the user accidentally clicked on 'Register' twice very quickly, with the second attempt to register fired before the first attempt has completed, resulting in both attempt succeeded.
Is this situation even possible to happen, or there are some other reason to cause this?