Added email package and email config, email confirmation setup but disabled
More work on auth/allow/deny, removed autopublish and insecure