confirm email action now return the auth token
fix #8 - autologin the user when it successfuly confirms its email address