Confirm a new user's email address with the 6-digit code sent at signup. The code expires 10 minutes after it was issued. On success any pending invitations for that email are accepted and a JWT plus the confirmed user is returned. Rate limited to 30 requests per hour per IP and 5 per 10 minutes per email address.
Ok