added email confirmation

- added email confirmation for non oauth users
- added an exception for oauth users that their account is automatically
  confirmed