9 confirm account

This PR adds account validation. By default accounts will be created with valid: false and the user will have to activate it using the link sent by email.