Unique Session ID already exists as the session token
tweaks/cleanup
Actually pass a callback
phpdoc
confirm email entires should be purged if not used within a certain time (1 day)