Add confirmed to user

Add confirmed:boolean to user table with default value false. User is allowed to sign in only after marked true (only accessible to admins).