Mainly useful for user export.

This was a dirty regex replace which worked on my server

This reverts merge request !733

```
# Only return statuses that have been pinned
GET /api/statuses/user_timeline.json?pinned=true

# Pin
POST /api/statuses/pin/:id

# Unpin
POST /api/statuses/unpin/:id
```

Added tests for `confirm_email` action.

unless requested by admin or moderator.

for registration, authentication, email confirmation, confirmation resending.
Made admin methods create confirmed users.

[#114] Account confirmation email, registration as unconfirmed (config-based), auth prevention for unconfirmed.

[#114] Refactored `password_reset` (moved to TwitterAPI). Added homepage links to password reset result pages.