Confirm Email endpoint: handle expired tokens

People are reporting issues seeing "Something went wrong" errors when they click on expired "Confirm my email" links.

We should handle these more elegantly, adding a page with confirm email instructions and a link to send a _new_ confirm email link.