Account Confirmation

We should provide a confirmation barries to account creating. The two paths that occur to me are as follow:

1. Create an account and keep a confirmed flag. This would allow users to authenticate even before confirmation.
2. Create a "Confirmation" entry and only when it was answered, an account would be created.

In both cases, a background task should delete unconfirmed accounts after a configurable amount of time.