make confirmEmail a "POST" route