Add ability to turn on/off confirmations

This pull request makes confirming accounts optional by checking for `users:require-confirm`, and defaulting to not requiring a confirmation (or, incidentally, an activation). If confirms are off, then created accounts will go straight to active, and any confirms that *do* happen should set the user straight to active (instead of a potential intermediary state).

Tests are updated so that they pass.