user confirmation in place
hiding email password