fix modifying email_confirmed on users except super admin