Make email confirm link idempotent (#13)

[fynnlyte]

Clicking on the token validation link now also returns with 200 if the email:

• has already been confirmed
• has not been requested to be changed after the last confirmation