make ajax-loader come from S3
send confirmation email manually (to use custom from addr.) and add custom head script option
fix bugs caught by tests