Add a verification reminder to order confirmation emails

@wedaly here's my take on the verification reminder. Is this what you had in mind?
I'm also not sure about this.  I *think* it should be safe to use `http://`, since nginx will include headers that asks the browser to use TLS for all connections.