email confirmation flow.

Details to work out still:

- [x] - Do the verification
- [x] - Error handling
- [ ] - In functional tests, get real token/uid to complete verification.

Link to #194