[ADD] email confirmation [CHG] security fix