user receives an email confirmation request at registration and the user can not login until they have confirmed their email