require email double-entry for new users