exchange email confirmation code for auth token