password reset confirmation now serves to confirm email users' accounts