add email confirmation so that a new user doesn't get created unless he/she confirms that the email belongs to him/her in the mail