Users receive confirmation emails with unhashed link