allow unconfirmed users to access site for 2 days