Prevent login until email is confirmed