*(bug 27159) make email confirmation code expiration time configurable