Better messaging for "you tried this confirmation code too many times so now it's locked"
Got "unexpected error" after failing for awhile. We should have better feedback. It's an edge case, but if a user screws up badly enough to trigger it, they should be provided a path forward.
I'd like the error to say Too many failed attempts. For your security, we invalidated the email(s) you received. Click the "Resend confirmation" link below to receive a new email, and try again.
(@nliles and @bufke if you don't like this, feel free to chat with me about it)
Please note that if there is any other scenario where an "unexpected error" could occur, make sure it's still possible to get that error in that scenario. Looks like an invalid code returns a 406 status, so I guess limit this message to that response? @bufke, is there any other circumstance where a 406 would happen here in a way that would make that message above not make sense?