Require users to confirm email ownership