check if user is valid (has confirm email) at login