Add email confirmation before logging in

[petergeorgas]

So users can't spam create accounts, add functionality (error handling on login page, mainly) to require email confirmation on account creation.