setting email confirmation to false by default - to make it easier to create initial admin
added protection to flask admin