Handle user account confirmation properly

[janl]

Now, if any plugin that returns false on its plugin.user.confirm hook, we assign the role unconfirmed. The plugin is then responsible for removing the unconfirmed role and adding the confirmed role.