Feature/confirmable

Adds Devises `confirmable` module to `Spree::User`. It's configurable with `Spree::Config::Auth[:confirmable]` which has a default of `false`.

Note: this is to be merged into the 2-3-stable branch, there's a separate PR to merge into master