Confirm the email link. Accounts already set up also require a second factor.
For security, the response is always the same whether or not an account exists.
