added Mandrill confirmations and hashed passwords