added unconfirmed_email attr accessible to user