add tests for email confirmation and password reset