confirm email via pin - fixes #8