fixed email confirmation mechanism, now requires confirmation page