add feature for ensuring that a suer is signed in via a confirmation email by using email spec