Allow users' to be created/updated as having confirmed email via the API

Created by: bladealslayer

Also exposes confirmation status, token and email timestamp via the API.

Fixes #6895.