The one page an account locked out pending email confirmation can reach.

It explains the block and carries both ways out: resend the confirmation link, or correct a mistyped address. Accounts.update_user_email/2 sets confirmed_at, so the correction form is a complete escape hatch.