users must confirm their email when registering