don't send a confirmation mail in developemnt
add more policy checks