add email confirmations when creating user and form for initial password setting