add unique code to confirmation url to prevent unauthorized login
Merge branch 'master' of https://github.com/atutor/ATutor
5550: added check for image file type to prevent other files from being uploaded