original email stays in db until confirmation