Email confirmation, fixed for good

Auth links migrated to the token_hash flow, and every account gets a personal workspace on signup.