* feat: wip user emails api * fix: allow admins with manage-users access to email confirmation api as well * fix: wrong route path * docs: openapi spec