Users receive confirmation emails with unhashed link

This is not a completed branch. For discussion because my computer battery sucks:

![image](https://cloud.githubusercontent.com/assets/8646429/5126686/ea475a8a-709c-11e4-939d-3a7c0eae1baa.png)

![image](https://cloud.githubusercontent.com/assets/8646429/5126689/f197badc-709c-11e4-93d1-5596dc3e7e0b.png)

remove the `format` stuff from here, handle responding to the request in the action