I wonder if we should actually try to create the account before this step since we're already showing the user a confirmation message but there's still a chance for failure. Maybe even an interstitial "creating account" view.

Also this presents a problem if the user has entered an email address that already exists since we'll have to take them back to the first step. We probably just need to do some validation against the auth server before leaving the email address/password view...