Allow logged out users to confirm email change

Fixes #261
Merge remote-tracking branch 'origin/master'