add feature for ensuring that a user is signed in via a confirmation email by using email spec.