make confirm_success_url mandatory, add email confirmation tests