Prevent users from signing in unless email is confirmed