user creation, authentication, and email confirmation